Robert Cain continues a series on KQL:
In my previous post, we saw how the
searchoperator was used to limit the results of a query. This post will focus on thewhereoperator, which performs a similar function.Whereas
searchis used to limit based on matching of a string, thewhereoperator is used to match based on a condition. In this post we’ll see some of the conditions that can be used with awhereoperator to narrow down a dataset.
Read on for plenty of uses of the operator.
Comments closed